Malicious IP Address Feed
Newly reported malicious IP addresses; 90,460 tracked.
10 indicators match · newest first · updated 2026-10-12 11:45 UTC
| First seen | Indicator | Category | Family | Reported by | Where | Network | Copy |
|---|---|---|---|---|---|---|---|
| 10-12 10:15 | 134.209.144[.]190 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 139.59.5[.]74 | Attacker | — | 1 feed | |||
| 10-12 10:15 | 139.59.88[.]134 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 168.144.112[.]61 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 168.144.95[.]14 | Attacker | — | 1 feed | |||
| 10-12 08:10 | 206.189.128[.]250 | Attacker | — | 1 feed | |||
| 10-12 07:04 | 139.59.33[.]238:443 | C2 | 1 feed | ||||
| 10-12 06:10 | 134.209.158[.]20 | Attacker | — | 1 feed | |||
| 10-12 06:10 | 64.227.180[.]21 | Attacker | — | 1 feed | |||
| 10-12 05:00 | 64.227.154[.]14 | Attacker | — | 1 feed |
Values are defanged (hxxp, [.]) so nothing here is a live link to malicious infrastructure. URL query strings are removed to protect victims. Copy copies the defanged form.